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What is claimed is: 

1 . A computer network comprising: 
5 a server system; 

a client system.lthe server system and the client system executing processes to 
provide security mechanisms for securing traffic communication between the two 
systems, the processed including key exchange processes executed when the client 
system is in an operational state; 
0 logic for detecting! whether the client system is in operational state; 

a storage device it the client system for storing the results of the key exchange 

processes; I 

logic for inhibiting the stored results of the key exchange from being updated until 
a successful execution oflanother set of key exchange processes between the server 
15 system and the client system; 

logic for updating thfe stored results of the key exchange if the execution of the 
other set of key exchange processes is successful; and 

logic for using result* stored in the memory to secure the traffic. 

20 2. The computer network of claim 1 , wherein the logic for inhibiting the stored 
results of the key exchange fbm being updated is embodied in the client system. 
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3. The cbmput^twork of claim 1 , wherein the loc£ inhibiting the stored 
results of theVey exchange from being updated is embodied in the server system. 

4. The corrtouter network of claim 1 , wherein the state of the server system includes 
5 at least one of "V* up ; "OS Hung," "Pre-boot," "OS suspend" and "Cold boot." 



5. The computer network of claim 1 , wherein the state of the client system includes 
at least one of -Os\jp." "OS Hung," "Pre-boot," "OS suspend" and "Cold boot." 



10 6. 
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The computennetwork of claim 1 , further comprising logic for allowing the traffic 
communication between the server system and the client system to be sent without 
security. 

7. The computer nLork of claim 1 , wherein the client system is a network device. 

8. The computer network of claim 1 , wherein the storage device is at least one of an 
Ethernet device, a coprocessor connected to an Ethernet device, and non-volatile 
storage that is part of an Elfiernet device. 
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inhibiting the stored 



9. The &wut«^$work of claim 1 , wherein the loc 
results of the ke\exchange from being updated includes: 

logic for se»g a signal acknowledging the successful execution of another set 

of key exchange pracesses; and 

logic for sending a signal confirming receipt of the acknowledgement signal. 



10 . The computer neLork of claim 1 , wherein the server system contains a storage 
device for storing the results of the key exchange processes. 



,0 11. The computer netwo* of claim 1, further comprising logic for switching the sewer 
system to a second server system in the computer network if the server system 
becomes non-operational. theUcurity mechanisms securing traffic communication 
between the second server sys\em and the client system. 
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12. A computer ^Bable medium for use in conjuncti^Bpth a server system and a 




system when 
storing 



client system for providing security mechanisms for securing traffic communication 
between thexserver system and client system, the computer readable medium including 
computer readable instructions encoded thereon for: 

detecting whether the client system is in operational state; 
executing first key exchange processes between the server system and the client 
le client system enters the operational state; 
e results of the first key exchange processes into the client system; 
inhibiting the stored results from being updated until a successful execution of a 
10 second set of ijey exchange processes between the server system and the client 
system; 

updatingl the stored results with the results obtained by the second set of key 
exchange processes if the execution of the second set of key exchange processes is 
successful; and 

15 using eithfer the stored results or the updated results to secure the traffic 

depending on whether the second set of key exchange processes is successful. 



13. The computer readable medium of claim 12, wherein the state of the server 
system includes a\ least one of "OS up," "OS Hung," "Pre-boot," "OS suspend" and 
20 "Cold boot." 
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14. Thelomput^^adable medium of claim 12, whel^^ie state of the client 
system includes at least one of "OS up," "OS Hung," "Pre-boot," "OS suspend" and 
"Cold boot." 



15. The computer readable medium of claim 12, further comprising computer 
readable instruction encoded thereon for allowing the traffic communication between the 
server system and the client system to be sent without security. 



16. The compiler readable medium of claim 12, wherein the results of the key 
10 exchange processes are stored into at least one of a network device, a coprocessor 
j= connected to a network device, and non-volatile storage that is part of a network device. 

0.1 

is ! 

•srsr 

m 17. The computer readable medium of claim 12, wherein the instruction for inhibiting 
s the stored results o^the key exchange from being updated includes: 

y*; 15 sending a sidnal acknowledging the successful execution of the second set of 

3 key exchange processes; and 

sending a sig lal confirming receipt of the acknowledgement signal. 



18. The computer 
20 readable instruction 



readable medium of claim 12, further comprising computer 
ncoded thereon for storing the results of the key exchange 



processes into the server system. 
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prising computer 



19. The dpmput Aadable medium of claim12, furth 
readable inlction encoded thereon for switching the server system to a second 
server systerriin the computer network if the server system becomes non-operational, 



the security mechanisms securing 
5 system and the Client system. 



traffic communication between the second server 



10 



20. A method \ providing security mechanisms for securing traffic communication 
between a server Ltem and a client system, the method comprising: 
detecting whither the client system is in operational state; 
executing firsl key exchange processes between the server system and the client 
system when the clieW system enters the operational state; 

storing the resits of the first key exchange processes into the client system; 
inhibiting the sired resuits from being updated until a successful execution of a 
second set of key excjange processes between the server system and the client 
15 system; 

updating the stold results with the results obtained from the second set of key 
exchange processes » \e execution of the second set of key exchange processes is 

successful; and 

using either the sLed results or the updated results to secure the traffic 
20 depending on whether 1 second set of key exchange processes is successful. 

21 . The method of claL 20, wherein the state of the server system includes at least 
one of "OS up," "OS HungV "Pre-boot,' "OS suspend" and "Cold boot." 
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22. The method of claim 20, wherein the state of the client system includes at least 
one of "OS up"' "OS Hung," "Pre-boot," "OS suspend" and "Cold boot." 

5 23. The method of claim 20, further comprising the step of allowing the traffic 
communication between the server system and the client system to be sent without 
security. I 

24. The methdd of claim 20, wherein the results of the key exchange processes are 
10 stored into at least one of a network device, a coprocessor connected to a network 

device, and non-vilatile storage that is part of a network device. 

25. The method bf claim 20, wherein the step of inhibiting the stored results of the 
key exchange from being updated includes: 

1 5 sending a signal acknowledging the successful execution of the second set of 

key exchange processes; and 

sending a signal confirming receipt of the acknowledgement signal. 

26. The method of claim 20, further comprising the step of storing the results of the 
20 key exchange processes into the server system. 
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27. The mithod^paim 20, further comprising the st^| switching the server 
system to a second server system in the computer network if the server system 
becomes non-operational, the security mechanisms securing traffic communication 
between the second server system and the client system. 
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